accepted This guide presents a catalog of security-relevant configuration settings for Ubuntu 24.04 LTS. It is a rendering of content structured in the eXtensible Configuration Checklist Description Format (XCCDF) in order to support security automation. 1.0.0 This profile contains configuration checks that align to the FedRAMP Moderate baseline. root ubuntu-web-03.example.com 192.168.1.106 ubuntu-web-03.example.com 192.168.1.106 Ubuntu 24.04 LTS 88.0 pass CCE-86370-2 pass CCE-84280-5 pass CCE-83978-5 fail CCE-88139-6 Check failed: accounts_umask_etc_login_defs pass CCE-83788-9 pass CCE-84250-5 pass CCE-86369-1 pass CCE-87950-8 pass CCE-81588-8 fail CCE-80476-0 Check failed: file_owner_sshd_config fail CCE-84659-1 Check failed: file_permissions_sshd_config pass CCE-87054-1 fail CCE-88267-0 Check failed: file_permissions_sshd_pub_key pass CCE-87721-4 pass CCE-83590-5 pass CCE-83270-5 pass CCE-83901-3 pass CCE-89198-2 pass CCE-84149-9 pass CCE-83201-1 pass CCE-84888-2 pass CCE-80930-3 pass CCE-89256-4 pass CCE-83944-2 pass CCE-84980-8 pass CCE-85356-5 fail CCE-84853-5 Check failed: accounts_maximum_age_login_defs pass CCE-81760-0 pass CCE-85036-2 pass CCE-84092-3 pass CCE-81485-7 pass CCE-86987-0 pass CCE-80785-5 pass CCE-80550-9 pass CCE-87715-9 pass CCE-89997-7 pass CCE-85280-2 pass CCE-81943-3 pass CCE-82912-2 pass CCE-85579-7 pass CCE-81629-8 pass CCE-86491-9 pass CCE-84170-1 pass CCE-83472-4 pass CCE-82069-5 pass CCE-80586-2 pass CCE-85358-7 pass CCE-84595-8 fail CCE-84771-6 Check failed: no_empty_passwords_unix pass CCE-81736-6 fail CCE-83809-7 Check failed: sshd_disable_gssapi_auth pass CCE-87996-7 pass CCE-86259-9 pass CCE-89884-9 pass CCE-82348-3 pass CCE-81855-3 pass CCE-84243-4 fail CCE-86322-8 Check failed: sshd_disable_root_login pass CCE-82429-3 pass CCE-89521-3 pass CCE-83322-4 pass CCE-87587-0 pass CCE-80001-6 pass CCE-83493-8 pass CCE-82842-4 pass CCE-83774-1 fail CCE-89198-8 Check failed: sshd_set_loglevel_info pass CCE-84369-6 fail CCE-82400-7 Check failed: sudo_custom_logfile pass CCE-84540-0 pass CCE-85382-0 pass CCE-84229-2 pass CCE-87779-7 pass CCE-89533-5 pass CCE-83595-8 fail CCE-84592-9 Check failed: screen_lock_pattern_hiding_enabled pass CCE-86710-1 pass CCE-80825-8 pass CCE-85003-0 pass CCE-82714-9 pass CCE-87026-5 fail CCE-84848-2 Check failed: package_update_automation_configured fail CCE-89477-1 Check failed: intrusion_detection_tool_installed fail CCE-88209-0 Check failed: encrypted_traffic_inspection_configured pass CCE-88777-8 pass CCE-80535-4 pass CCE-83159-3 pass CCE-87072-7 pass CCE-87098-7 pass CCE-89133-5 pass CCE-86902-4 pass CCE-88965-8 pass CCE-83524-6